Privacy Policy
This privacy notice (“Privacy Notice” or “Notice”) explains how information is collected, used and disclosed by Cyb3r Operations as data controller within the meaning of the UK GDPR and applies to information collected when you access or use our website, www.cyb3roperations.com
(the“Site”), or when you sign up to attend or participate in an event or webinar, download our materials, and inquire about our “Offerings”, which include Cyb3r Operations’ cloud-based software, technical support, training and professional services, such as incident response, investigations, tabletop exercises, forensics and next-generation penetration tests related to cybersecurity, and otherwise interact with us.
1. Who “we” are
When we say “Cyb3r Operations”, “we,” “us” or “our” in this Notice, we are referring to Cyb3r Operations Limited.
2. Who “you” are
When we say “you,”we are referring to a customer, to a visitor to our Site or to a participant at a Cyb3r Operations event or activity, such as conference attendee, and otherwise individuals about whom we may collect personal data. A “customer” is an organization that has acquired a subscription to Cyb3r Operations Services (“business customer” and “Services” respectively under this Notice). Please note that information on processing of personal information of employees, other staff and
candidates is found under our Employee and Candidate Privacy Notice, also on our homepage.
3. Scope of Privacy Notice
In addition to describing our practices for collecting, using and disclosing personal information, this Privacy Notice describes the rights individuals have to control the use of their personal information (see paragraph 22 below). When we say “personal information” in this Privacy Notice we are referring to any information relating to an identified or identifiable natural person who can be identified, directly or indirectly, by for example the individual’s name, identification number, location data, email address, social media handle or other online identifier. If you use the Services through a business customer (like your employer), the terms of the customer’s contract for the Services may restrict our collection or use of your personal information more than what is described in this Privacy Notice.
4. Updates
We may change this Privacy Notice from time to time. The date of the most recent revision is reflected at the end of this Notice. All updates and amendments are effective immediately upon posting, which we may give by any means, including any additional notice (such as adding a statement to our homepage). We encourage you to review this Notice often to stay informed of changes that may affect you. Your continued use of the Site or Services signifies your ongoing acknowledgment of this Notice.
5. Contacting us
Please contact us with any questions or comments about this Notice, including questions around how we process your personal information or if you would like to submit a request regarding your information. You can reach us by email at: privacy@cyb3roperations.com, or at our address: Cyb3r Operations Limited, 167 to 169 Great Portland Street, 5th Floor, London, W1W 5PF.
6. Contact information we collect
When you register for or use the Services, modify your Services account, consult with us, send us an email, participate in any interactive features of the Site or Services, participate in a survey or a Cyb3r Operations activity or event, integrate the Services with another website or service, or communicate with us in any way, you are voluntarily giving us information that we collect. The types of personal information we may collect directly from you may include your first name, last name, picture, employer name, job title, industry, username, email address, phone number, physical address, social media handle and IP address. In cases where we ask you for certain information, for example when completing a form requesting a whitepaper, we will tell you what information is required. If you attend or give a presentation during a Cyb3r Operations-hosted in-person or virtual event, participate in a webinar or agree to be recorded during a telephone conversation or virtual meeting, we may record and store your voice and image and collect other personal information you provide to us, like your professional biography. If you choose to personalise your account with a photo or social media profile, then we will collect this information, too. We may document events in other ways, too, such as by taking photographs, conducting interviews and recording participation in a live question-and-answer session. If you are a customer, we also store the information that you provide to the Services, which in the case of a business customer includes the information types listed above with respect to the business customer’s personnel. If you make a purchase, we will collect credit/debit card numbers or data about other types of payment used.
7. Information collected for and by our customers
If you are a business customer using the Services, you may process personal information that you have collected from your own personnel or other individuals. You are responsible for making sure that you have appropriate lawful basis for us to collect and process information about those individuals as a data processor. If you are an employee or contractor of one of our business customers, please contact that business customer directly to update or delete your information. If you contact us, we will provide notice to our business customer of your request.
8. Information we collect from your use of Services
We receive information about how and when you access or use the Services, store it in log files or other types of files associated with your account, and link it to other information we collect about you. This information includes, for example, your IP address, time, date, browser used, type of computer and actions you have taken within the application. This information helps us to improve our Services. If you are a business customer, please also refer to the Cyb3r Operations Privacy Notice For Customers provided to you in the course of engaging our Services.
9. Information relating to your use of the Website
When you access or browse our Site, we collect information about your visit and your web browsing. That information may include your IP address, your operating system, your browser ID, your browsing activity and other information about how you interacted with the Site. We may collect this information as a part of log files as well as
through the use of cookies or other tracking technologies, including server-side. Our use of cookies and other similar technologies, such as Google Analytics, is discussed more detail in our Cookie Notice, found here: www.cyb3roperations.com/cookies. If you are required to log in to gain access to a particular Site feature or portal, we collect usernames, passwords and other login credentials to authenticate access.
10. Information from other sources
From time to time we may obtain personal information about you (or in the case of business customers, your personnel) from third party sources, such as public databases, social media platforms, third party data providers and our joint marketing and sales partners. We take steps to ensure that such third parties are legally permitted or required to disclose such information to us, for example when we reasonably believe they have your consent or another lawful basis for providing your personal information to Cyb3r Operations. We use this information, alone or in combination with other information (including personal information) we collect, to enhance our ability to provide relevant marketing and content to you and to develop our Offerings and provide you with more relevant products, features and services.
11. How we use information
We may use and disclose personal information described in this Notice as described in the table below, including purpose of processing and primary lawful grounds.
| Purpose of Processing | Lawful Basis |
|---|---|
| provide, operate, maintain and support the Services; | contract |
| manage accounts that you create with us; | contract |
| send system alert messages, for example, we may inform you of temporary or permanent changes to our Services, such as planned outages, new features, version updates, releases, abuse warnin gs and changes to this Privacy Notice; | legitimate interests |
| communicate with customers (and business customers’ personnel) about their accounts and provide customer support, training and other requested services; | contract |
| bill and collect money owed to us by customers, including sending emails, invoices, receipts, notices of delinquency and alerting customers if a different credit card number is needed (we use third parties for secure credit card transaction processing, and we send billing information to those third parties to process your orders and credit card payments) | contract |
| ensure and enforce compliance with our End User Licence Agreement (“EULA”), our other agreements with a customer, and/or applicable law, which may include tools and algoithms that help us prevent violations; | contract |
| monitor and keep secure our technology assets; | legitimate interests |
| maintain endpoint and network security; | legitimate interests |
| protect the rights and safety of our customers and third parties, as well as our own; | legitimate interests |
| prevent, investigate or provide notice of fraud or unlawful or criminal activity; | legitimate interests |
| protect your safety or the safety of others; | legitimate interests |
| respond to lawful requests by public authorities, including to meet national security or law enforcement requirements | legal obligation |
| meet legal requirements, including complying with court orders, valid discovery requests, valid subpoenas, and other appropriate legal mechanisms | legal obligation |
| prosecute and defend a court, arbitration, or similar legal proceeding; | legitimate interests |
| perform our terms and conditions of business that we agree to with our customers; | contract |
| provide information to our professional advisors and representatives, such as attorneys and accountants, to help us comply with legal, accounting or security requirements; | legitimate interests |
| contact you when a partner or other third party makes a referral to us and we reasonably believe that they have your consent or another lawful basis for providing your personal information to Cyb3r Operations. A partner is a separate organization that collaborates with Cyb3r Operations to deliver cybersecurity solutions, services or Offerings to customers; | consent |
| inform third parties (including partners) to the extent that you consent to this sharing, where required by applicable law or expressly direct us to interact directly with such third parties; | consent |
| improve our products, technology and Services, including for example, aggregating information from your use of the Services or visits to our Site and sharing this information with third parties to improve the Services and Site; | legitimate interests |
| send you informational and promotional content in accordance with your marketing preferences (provided you have not unsubscribed from promotional emails); | consent |
| send you reports, white papers and other resources that you specifically requested to receive from us; | consent |
| promote use of our Services or Offerings to you and others, for example to suggest additional features of our Services that you might consider using (again, provided you have not unsubscribed from promotional emails); | consent |
| analyse your feedback through surveys or research; | legitimate interests |
| transfer your information in the case of a sale, merger, consolidation, liquidation, reorganization, or acquisition, provided that (1) any acquirer will be subject to our obligations under this Privacy Notice, including your rights to access and choice and (2) we will notify you of the change either by sending you an email or posting a notice on the Site | legitimate interests |
| link or combine personal information with other information we collect or obtain about you (such as information we source from our third party partners), to serve you specifically, such as to deliver Services according to your preferences or restrictions, or for advertising or targeting purposes in accordance with this Privacy Notice. (Any combination of personal information with other information is treated as personal information under this Notice.) | consent |
12. Sharing information with our service providers
We are headquartered in the United Kingdom and operate internationally. We also share personal information described in this Privacy Notice with third-party vendors and service providers who are working on our behalf and require access to your information to carry out that work, as well as partners, resellers and event sponsors. For example, Cyb3r Operations currently uses cloud services from Amazon Web Services and Google for the infrastructure of its cloud-hosted Services. These service providers are authorized to use your personal information only as necessary to provide services to Cyb3r Operations and/or the Services and are bound to contractual obligations to maintain the confidentiality of your information. Many of these service providers are headquartered in the United States and operate internationally. Accordingly, you should be aware that your personal information may be processed in countries other than your country of residence, and that those countries may have different privacy and data protection laws than where you reside.
13. Safeguarding personal information. All Rights Reserved. Con
We take reasonable and appropriate measures to protect personal information from loss, misuse and unauthorized access, disclosure, alteration and destruction, taking into account the risks involved in the processing and the nature of the personal information. However, no means of processing of personal information is 100% secure and while we comply with our legal obligations, we cannot guarantee absolute security. For business customers, where you use a customer portal in the course of the Services it is your responsibility to keep individual password confidential to the user, to ensure protection against unauthorised access and help ensure data security.
14. Information changes and retention
If you are a customer, you may update, correct or delete personal information about you (or your personnel, if a business customer) by logging into your online account and modifying your information or by emailing us.
While you are a customer, we will retain your information to meet our legal and contractual requirements. However, when you cease using our services, we may still retain your personal data for a period of time. There are several reasons why we retain your information, these include:
- to comply with legal obligations under local law;
- to establish or defend legal claims;
- to comply with our contractual obligations and rights in relation to the information provided;
- our legitimate interests where we have carried out balancing tests;
- to comply with guidelines issued by relevant data protection authorities.
If you ever request to have your data erased, we will promptly action your request. However, certain types of personal data may need to be retained in order to comply with our legal obligations indicated above. We may also retain client personal data in aggregated or de-identified form for business insight purposes.
We may retain personal information in computer backup or archival copies generated in the ordinary course of our business.
15. Social media
This paragraph applies to our public Site, not the features or functionality of the Services. Our Site may include social media features. These features may collect information about your IP address and which page you are visiting, and they may set a cookie to make sure the features function properly. We use cookies for the following purposes, amongst others:
- to identify the account holder’s preferred language, so it can be automatically selected when the account holder returns to the website;
- for analysis of website traffic, to allow us to make suitable improvements; and
- to provide you with the best possible interaction on your device.
Additional information on cookies set by social media providers is found in our Cookie Notice. Social media features and widgets are either hosted by a third party or hosted directly on our Site. We also maintain presences on social media platforms, such as LinkedIn. These pages regularly feature posts about our products, new features and job postings. If you interact with these pages or contact Cyb3r Operations through them as a member of the respective social network, we may receive and process certain personal information. As the operator of these pages, Cyb3r Operations also has access to anonymous statistics on visitor interaction with our pages (analytics data). The social network operators record user interactions operated by Cyb3r Operations using cookies and similar technologies. For more information on processing by these social media forums, please see their respective privacy notices.
16. Community forums and blogs
We may have public blogs or other forums on our Site from time to time. You may choose to participate with these resources by interacting with us, interacting with other users or adding your own posts. Any information you include in a comment on a public blog may be read, collected and used by anyone. To request removal of your personal information from our blogs or testimonials, contact us at the email address listed above. In some cases, we may not be able to remove your personal information, in which case we will let you know if we are unable to do so and why.
17. Links to third-party sites and services
Our Site and Services include links to, or integrations with, other sites and services whose privacy practices may be different from ours. If you submit personal information to any of those sites or services, your information is governed by their privacy policies.
18. Individuals under the age of 18
Neither the Sites nor the Services are intended for use by individuals under 18 years of age. We do not knowingly collect personal information of individuals under 18. If a parent or guardian becomes aware that his or her child, who is under 18, has provided us with information, he or she should contact us at: privacy@cyb3roperations.com.
19. International transfers of personal information (including to outsourced service providers)
As noted above, some of our service providers may be headquartered in the United States and other territories and operate internationally. In addition to ensuring those providers are bound by restrictions on use and disclosure of personal information, our agreements with them also reflect the legal mechanisms in place to ensure the transfer of personal information is in compliance with UK and European data protection law, typically EU-U.S. Data Privacy Framework (“EU-US DPF”), the UK extension to the EU-US DPF or standard contractual clauses (“SCCs”) (also known as model clauses) under the GDPR. These mechanisms include written data processing agreements or other appropriate safeguards as established in the GDPR or voluntary privacy frameworks made to improve general data privacy and safeguard the cross-border transfer of personal information (“Privacy Frameworks”).© 2021-2022 CYB3R OPERATIONS LTD. All Rights Reserved. Confidb3roperations.com
20. Lawful bases for processing
The European Union or UK General Data Protection Regulation (the “GDPR”) requires that personal information be processed lawfully and outlines specific legal bases for processing. We describe in paragraphs 6 through 10 above the personal information we may collect, and in paragraph 11 how we may use it alongside lawful basis. The legal bases under the GDPR for those uses depends on the personal information collected and the context of its collection. Cyb3r Operations has determined a primary basis for each use, including:
- performing a contract, or taking steps linked to a contract, such as providing the Services to you if you are an individual customer;
- subject to our interests not being overridden by your interests and fundamental rights and freedoms, pursuing legitimate interests in the conduct of our business, such as processing the data of employees;
- processing your personal information where you have provided consent, such as when you submit an online form with your contact information on our Site requesting that we get in touch with you with information on our Services or Offerings. You can opt out of these communications at any time by using one of the methods described in paragraph 22 below on your data subject rights and how to exercise them including withdrawal of consent; and
- complying with legal obligations, such as responding to lawful requests by public authorities.
21. Inquiries and Complaints
We are committed to resolving complaints about our collection or use of your personal information. For inquiries or complaints regarding this Privacy Notice, we request that you first contact Cyb3r Operations as provided in paragraph 5. You may also approach our data protection authority, the Information Commissioner’s Office (ICO), website link: https://ico.org.uk/, or your local data protection authority. A list of EU/ EEA supervisory authorities can be found here on the European Data Protection Board Website: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en. If you are located in the UK, you can also contact the ICO described above.
22. Your rights in relation to personal information and how to exercise them
The following rights are granted under the UK and EU GDPRs. If you wish to exercise any of the below, please contact us as described under paragraph 5 above:
- the right to us to provide you, or a third party, with copies of the personal information we hold about you at any time and to be informed of the contents and origin, verify its accuracy, or else request that such information be supplemented, updated or rectified according to the provisions of local law;
- the right to request erasure, anonymisation or blocking of your personal information that is processed in breach of the law;
- The right to lodge a complaint regarding the processing of your personal information with a supervisory authority, as described under paragraph 21 above.
- withdrawal of consent – when personal information are processed on the basis of consent an individual may withdraw consent at any time. Revocation does not affect the permissibility of the processing of your personal data up to now. In the event that you no longer want to receive any marketing material from us, please use the unsubscribe option (which is in all of our marketing emails to you), or contact us as described under paragraph 5 above. If we process your information for the purpose of direct advertising, you have a general right to object; and
- the right to object on legitimate grounds to the processing of your personal information. In certain circumstances we may not be able to stop using your personal information. If that is the case, we’ll let you know and explain why.
To exercise such rights and if you have any questions about how we collect, store and use personal information, please contact us using the details as set out in the “Contacting us” (paragraph 5) above.
23. CCPA and operational assurances
Where you are a business subject to the California Consumer Privacy Act (as amended) and seeking to engage our Services, we are happy to reflect vendor requirements under that legislation, including the prohibition on selling or sharing information. Please contact us using the details set out under “Contacting us” (paragraph 5) above.
24. Changes to our Privacy Notice
We reserve the right to amend this Privacy Notice at our discretion and at any time. When we make changes to this Privacy Notice, we will notify you by email or through a notice on our website homepage.
Last updated: December 2025